PT-2026-54995 · Villatheme · Ald – Dropshipping/Fulfillment For Aliexpress/Woocommerce

Ananda Dhakal · Published 2026-07-02 · Updated 2026-07-02 · CVE-2026-57352

NVD

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Unauthenticated Broken Authentication in ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce <= 2.2.0 versions.

Fix

Weakness Enumeration

CWE-1390

Related Identifiers

CVE-2026-57352

Affected Products

Ald – Dropshipping/Fulfillment For Aliexpress/Woocommerce

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-57352 · Security Note
• https://patchstack.com/database/wordpress/plugin/woo-alidropship/vulnerability/wordpress-ald-dropshipping-and-fulfillment-for-aliexpress-and-woocommerce-plugin-2-2-0-broken-authentication-vulnerability?_s_id=cve · Note